IN THE CLAIMS 


Please amend the claims as follows: 

1. (Canceled) 

2. (Currently Amended) A digital optical storage medium containing compr e ss e d digita l 
audiovisu al content with protections against unauthorized copying, the storage medium 
comprising: 

(a) a digital signature authenticating at least an identifier of said optical the storage 
medium; 

(b) a revocations list for identifying at least one oth e r revoked storage medium that is 
r e vok e d ; 

(e) compr e ssed digital - audiovisua l content that is encrypted by using bro adcast 

encryption, whereby: 

(i) each of a plurality of authorized playback devices has cryptographic keys 
sufficient for decrypting said audiovisua l the content, and 

(ii) each of a plurality of revoked playback devices do not have keys 
sufficient for decrypting said audiovisual the content; 

(d) program logic for an interpreter of a Turing complete language, the program logic 
adapted for execution on a playback device in order to play said audiovisual the 
content, 

the program logic installin g configured for installation on the playback 

device ; and : . 

the program logic further configured for cryptographically authenticating 

prot e cting on th e playback device the revocations list; 

(e) a plurality of versions for each of a plurality of portions of said compressed digital 
audiovisual the content, wherein: 

(i) said versions for each portion may b e are distinguished from each other-4» 

pirat e d recordings of said audiovisual cont e nt ; 
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(ii) said versions are encrypted with different keys, such that each of said 
authorized playback devices is capable of deciphering at least one, but not all, of 
said versions for each of said portions; and 

(iii) the combination of said portions decipherable by a given player may be 
us e d usable to identify said plave r. the program logic being further configured to 
provide a correct set of decryption keys for decrypting each of said versions; and 
interface logic defining an interface usable to interact with a user and to control 
playback of said ' audiovisu al: the content. 

3. (Currently Amended) The medium of claim 22^ wher e wherein : 

(i) said program logic is configured to perform a plurality of said security 
checks; and 

(ii) said program logic is configured to permit playback of said audiovisual 
the content provided that said plurality of security checks are successful. 

4. (Currently Amended) The medium of claim 3 wh e r e wherein said program logic is 
co nfi gured to invoke at least one cryptographic operation supported by at least one of 
said authorized playback devices. 

5. (Currently Amended) The medium of claim 3 where wherein said program logic is 
configured to perform at least one operation necessary for decryption of said audiovisual 
the content by at least one said authorized playback device. 

6. (Currently Amended) The medium of claim 2 wherein a subset of said authorized 
playback devices encompass a plurality of models, each model having a model-specific 
vulnerability, and the medium further comprising.program logic which, when executed 
by a device of each said vulnerable model, is configured to: 

(a) mi tigate said vulnerability affecting said vulnerable playback device; and 

(b) perform at least one operation necessary for said vulnerable playback device to 
decrypt said audiovisual content. 
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7. (Currently Amended) The medium of claim 6 wh e re wherein said program logic includes 
executable code for a Turing-complete virtual machine. 

8 . (Currently Amended) The medium of claim 6 wh e r e wherein said operation necessary to 

decrypt includes updating a cryptographic key contained in said playback device. 

» ' *' , ' * 

9. (Currently Amended) The medium of claim 6 wher e wherein said program logic for 
mitiga tin g includes native executable code configured to detect whether the security of a 
vulnerable device has been compromised. 

1 0. (Currently Amended) The medium of claim 6 wh e re wherein said program logic for 
mitigating includes native executable code configured to correct a vulnerability in a 
vulnerable device. 

1 1 . (Currently Amended) The medium of claim 6 wher e wherein said program logic for 
mi tigating includes a firmware upgrade for correcting at least one vulnerability. 

12. (Currently Amended) A device for securely playing digital audiovisua l content, said 
audiovisual the content including a plurality of regions each having multiple versions 
thereof, the device comprising: 

(a) a media reader driv e including a las e r for use in reading data from rotating optical 
m e dia a storage medium: 

(b) a nonvolatile memory containing: 

(i) a set of cryptographic player keys for use with a broadcast encryption 

system, and 

(ii) identifiers of revoked media; 

(e) a bulk decryption module for decrypting encrypted audiovisual content from said 
media the storage medium: 

(d) a Turing-complete interpreter for executing program logi c, the program logic 
configured to: 

(i) install from the media reader: driv e and 
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cryptographically authenticate p rot e ct 4n the nonvolatile m e mory 
identifiers of revoked media; 

(ii) verify whether valid digital signatures contained on said m e dia the storage 
medium authenticate said m e dia the storage medium; and 
(hi) verify whether said media are the storage medium is identified as revoked 
. in said nonvolatile memory; 

(tv) select a version of each said of the plurality of regio ns, thereby generating 
a set of selected versions; 

provide a correct set of decryption keys for decrypting each of said 
selected versions: 

(v) decrypt said selected version(s), whereby a combination of said versions 
sp.lftctftd in the course of playing said m e d i a content from the storage 
medium uniquely identifies said device; and 
(e) at least one codec for decompressing said audiovisual decoding content. 

1 3 . (Currently Amended) The device of claim 1 2 further comprising an interpreter for a 
Turing-complete language, wh e r e wherein said interpreter is configured to obtain said 
program logic from said drive and execute said program logic. 

14. (Currently Amended) The device of claim 12 further comprising means for reducing 
during a rendering process the output quality of said audiovisual content in dependence 
upon whether a security requirement specified by said the storage medium for high- 
quality output is met. 

15. (Currently Amended) The device of claim 12 wherein: 

(a) said combination of versions selected during the course of playback of any one 
said storage medium does not uniquely identify said playback fee device; and 

(b) said combination of versions selected during fee course of playback of a plurality 
of said storage media does uniquely identify said playback fee device. 
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1 6 . (Currently Amended) A method for playing encrypted digital audiovisual content from a 

digit al storage medium, the method comprising: 

(a) verifying a digital signature for authenticating said medium; 

(h) retrieving at least one player key from a nonvolatile memory; 

(e) using said at least one player key with a broadcast encryption system; 

(d) using a result of said broadcast encryption system to decrypt at least a portion of 
said audlovisual -the content; 

(e) reading program logic for a Turing-complete interpreted language from the digital 
medium; 

(f) using an interpreter to execute said program logic, wherein said interpreter 

performs operations specified in said program logic including ' ' ■ 

(i) installing from the a media plaver device: driv e and 
cryptographically authenticating p rotecting identifiers of revoked media; 

(ii) verifying whether valid digital signatures contained on said m e dia foe 
medium authenticate the medium said media ; and 

(jii) verifying whether said media ar e the medium is identified as revoked in 
said nonvolatile memory; 

(g) selecting a variant from a plurality of variants for each of a plurality of portions of 
said audiovisual the content, wherein: 

(i) . said media player device is capable of decrypting said selected variant;, 
and 

(ii) sai d media player device lacks at least one cryptographic key required to 
decrypt at least one non-selected variant for each said portion; 

providing a correct set of decryption keys for decrypting each selected variant; 

and 

(h) decrypting each said selected varian t using the provided correct set of decryption 
keys . 

17. (Currently Amended) The method of claim 1 6 wh e re wherein said interpreter performs 
operations specified in said program logic to respond to selections from a user, said user 
selections include button presses on a remote control. 
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18. (Currently Amended) The method of claim 16 wh e r e wherein said program logic directs 
said player to perform an AES block cipher operation via said interpreter. - 

19. (Previously Presented) The method of claim 1 6 further comprising accessing a media : v . 
revocations list to determine whether said medium has been revoked. 

20. (Currently Amended) The device of claim 12 wh e r e wherein : 
said set of cryptographic player keys is unique to the player; and 

said program logic is configured to select a unique set of versions representing the 
content using said unique set of cryptographic player keys. 

2 1 . (Currently Amended) The medium of claim 3 4 where wherein the program logic that is 
mnfipnred to perform a plurality of security checks generates a security check result, 
the security check result for embedding r e sults of the program logic is - adapted to emb e d 
the r e sults of the at least one s e curity ch e ek into audio visual content rendered by a the 
playback device on which die security checking is performed. 

22. (Currently Amended) The medium of claim 2 i wher e wherein t he program logic is 
adapted to perform at least one security check of a playback device seeking to play said 
audiovisual the content, the at least one security check adapted to verify at least one of 

(i) playback device identity, including at least one of player serial number, 
specific subscriber information, player model, or player software version, or 

(ii) a result of cryptographic processing adapted to fail verification operation if 
executed on at least one of an unauthorized or revoked or compromised playback device. 


23 . (Currently Amended) The device of claim 1 2 . further comprising wher e th e media 
verification logic further p e rforms configured to perform a security check that 
interrogates a playback environment to verify at least one ofi 

(i) playback device identity, including at least one of player serial number, 
specific subscriber information, player model, or player software version, or 
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(ii) a result of cryptographic processing adapted to fail verification operation if 
executed on at least one of an unauthorized or revoked or compromised playback device. 

24. (Currently Amended) The device of claim 12 wher e wherein t he Turing-complete 
interpreter is adapted to execute program logic that does not decrypt a selected version if 
the program logic identifies said media as revoked. 

25. (Currently Amended) The method of claim 16 where wherein said program logic 
performs at least one security check of a player device seeking to play said audiovisual 
content, the at least one security check adapted to verify at least one of 

- (i) player identity, including at least one of player serial number, specific 
subscriber information, player model, or player software version, or 

(ii) a result of cryptographic processing adapted to fail verification operation if 
executed on at least one of an unauthorized or revoked or compromised player, and to 
inhibit at least one of full quality playback or playback if at least one security check fails. 
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